Ownable Resource Security › Authorizing Resource Access › SYSID Authorization

SYSID Authorization

The SYSID keyword gives security administrators more control over the authorization of resources and facilities. When specifying a PERMIT or adding a facility to an ACID, the SYSID keyword allows you to specify the SYSID (which is actually the SMFID) that the authorization applies to.

SYSID can only be used with ADDTO, REMOVE, PERMIT, and REVOKE. You can enter up to five SYSIDs on a command.

The following example allows the user to use the TSO facility, but only on the system that has an SMFID of TSO1.

TSS ADD(useracid) FACILITY(TSO) SYSID(TSO1)

Similarly, if a PERMIT is done with SYSID, that PERMIT will match only if the access is done on that system.